@lucas-2 said in Captive portal does not load google account authentications:

Google's hosts are all allowed, and so is authentication with Google's IP allowed, in the "Allowed IP Addresses" settings.

Check blog post again. No need to allow hosts.
Freeradius, running on pfSense, can access freely all IPs on the Internet, as it is just an outbound connection over WAN.

Netgate's blog post is written with pfSense 2.6.0 (or 22.05 Plus - identical I guess) and it should work.

pfBlockerNG and the ASN numbers, PfblockerNG will also import JSON but you can't create create a single alias with IPv4 & IPv6.

Screenshot 2022-09-14 at 08.41.28.png

https://db-ip.com/as15169-google-llc

Followed the full reset instructions on the linked page, reinstalled squid - back in business.

Thanks for the help @stephenw10!

post up your pcap of the dhcp conversation, discover, offer, request and ack.

If your saying the dhcpd is sending out the correct mask, and others are using it correctly - then you got something wacked on those clients!

Options shows that there was an option 1 of type Text with a blank value. Option 1 is - tada - subnet mask.

So yeah that would F it up big time!! But you would of seen that in the offer, or lack of the offer containing mask.